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REMOTE MONITORING OF SWITCH NETWORK 

BACKGROUND OF THE INVENTION 

Field of the Invention 

The present invention relates generally to computer network management, and 
more specifically, to the remote monitoring of switch networks for purposes of facilitat- 
ing management of such networks. 

Rrief Description of Related Prior Art 

Data communication in a computer network involves data exchange between two 
or more entities interconnected by communication links and subnetworks. These entities 
are typically software programs executing on hardware computer platforms, such as end- 
stations and intermediate stations. Examples of an intermediate station may be a router or 
switch which interconnects the communication links and subnetworks to enable trans- 
mission of data between the endstations. A local area network (LAN) is an example of a 
subnetwork that provides relatively short distance communication among the intercon- 
nected stations, whereas a wide area network enables long distance communication over 
links provided by public or private telecommunications facilities. 

Communication software executing on the endstations correlate and manage data 
communication with other endstations. The stations typically communicate by exchang- 

1 

H:\U2\025\01 15\PROSECUT\115PATAP.DOC 02/23/99 1:07 PM 



PATENT 
874/112025-0115 

ing discrete packets or frames of data according to predefined protocols. In this context, a 
protocol consists of a set of rules defining how the stations interact with each other. In 
addition, network routing software executing on the routers allow expansion of commu- 
nication to other endstations. Collectively, these hardware and software components 
comprise a communications network and their interconnections are defined by an under- 
lying architecture. 

Modern communications network architectures are typically organized as a series 
of hardware and software levels or "layers" within each station. These layers interact to 
format data for transfer between, e.g., a source station and a destination station communi- 
cating over the network. Predetermined services are performed on the data as it passes 
through each layer and the layers communicate with each other by means of the prede- 
fined protocols. The lower layers of these architectures are generally standardized and 
are typically implemented in hardware and firmware, whereas the higher layers are gen- 
erally implemented in the form of software running on the stations attached to the net- 
work. An example of such a communications architecture is the Internet communications 
architecture. 

The Internet architecture is represented by five layers which are termed, in ascend- 
ing interfacing order, physical interface, data link, network, transport and application lay- 
ers. These layers are arranged to form a protocol stack in each communicating station of 
the network. Figure 1 illustrates a schematic block diagram of prior art Internet protocol 
stacks 125 and 175 used to transmit data between a source station 1 10 and a destination 
station 150, respectively, of a network 100. As can be seen, the stacks 125 and 175 are 
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physically connected through a communications channel 180 at the interface layers 120 
and 160. For ease of description, the protocol stack 125 will be described. 

In general, the lower layers of the communications stack provide internetworking 
services and the upper layers, which are the users of these services, collectively provide 
common network application services. The application layer 1 12 provides services suit- 
able for the different types of applications using the network, while the lower interface 
layer 120 accepts industry standards defining a flexible network architecture oriented to 
the implementation of LANs. 

Specifically, the interface layer 120 comprises the physical interface layer 126, 
which is concerned with the actual transmission of signals across the communication 
channel and defines the types of cabling, plugs and connectors used in connection with 
the channel. The data link layer (i.e., "layer 2") 121 is responsible for transmission of 
data from one station to another and may be further divided into two sublayers: Logical 
Link Control (LLC 122) and Media Access Control (MAC 124). 

The MAC sublayer 124 is primarily concerned with controlling access to the 
transmission medium in an orderly manner and, to that end, defines procedures by which 
the stations must abide in order to share the medium. In order for multiple stations to 
share the same medium and still uniquely identify each other, the MAC sublayer defines 
a hardware or data link address called a MAC address. This MAC address is unique for 
each station interfacing to a LAN. The LLC sublayer 122 provides communications 
services between devices in the network. 

3 

H:\112\025\0115\PROSECUT\115PATAP.DOC 02/23/99 1:07 PM 



PATENT 
874/112025-0115 

The primary network layer protocol of the Internet architecture is the Internet 
protocol (IP) contained within the network layer 116 (i.e., "layer 3"). IP is a network 
protocol that provides network routing and that relies on transport protocols for end-to- 
end reliability. An example of such a transport protocol is the Transmission Control 
Protocol (TCP) contained within the transport layer 1 14. The term TCP/IP is commonly 
used to refer to the Internet architecture. (See, e.g., Tanenbaum, Computer Networks, 
Third Ed.. Prentice Hall PTR, Upper Saddle, River, New Jersey, 1996). 

Data transmission over the network 1 00 therefore consists of generating data in, 
e.g., sending process 104 executing on the source station 110, passing that data to the 
application layer 1 12 and down through the layers of the protocol stack 125, where the 
data are sequentially formatted as a frame for delivery onto the channel 180 as bits. 
Those frame bits are then transmitted over an established connection of channel 180 to 
the protocol stack 175 of the destination station 150 where they are passed up that stack 
to a receiving process 174. Data flow is schematically illustrated by solid arrows. 

Although actual data transmission occurs vertically through the stacks, each layer 
is programmed as though such transmission were horizontal. That is, each layer in the 
source station 1 10 is programmed to transmit data to its corresponding layer in the desti- 
nation station 150, as schematically shown by dotted arrows. To achieve this effect, each 
layer of the protocol stack 125 in the source station 110 typically adds information (in the 
form of a header) to the data generated by the sending process as the data descends the 
stack. 

4 
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For example, the network layer encapsulates data presented to it by the transport 
layer within a packet having a network layer header. The network layer header contains, 
among other information, source and destination (logical) network addresses needed to 
complete the data transfer. The data link layer, in turn, encapsulates the packet in a frame 
that includes a data link layer header containing information required to complete the data 
link functions, such as (physical) MAC addresses. At the destination station 150, these 
encapsulated headers are stripped off one-by-one as the frame propagates up the layers of 
the stack 1 75 until it arrives at the receiving process. 

A router is a conventional intelligent intermediate station that implements net- 
work services such as route processing, path determination and path switching functions. 
The router also provides interfaces for a wide range of communication links and subnet- 
works. The route processing function allows a router to determine the type of routing 
needed for a packet, whereas the path switching function allows a router to accept a 
packet on one interface and forward it on a second interface. The path determination, or 
forwarding decision, function enables the router to select the most appropriate interface 
for forwarding a packet. 

A switch is another conventional type of intermediate network station that pro- 
vides the basic functions of a bridge, including filtering of data traffic by MAC address, 
"learning" and forwarding of the frame based on information contained in the data link 
(MAC) header. One conventional network switching technique involves forming a cas- 
caded switch network by coupling multiple physical switches together via suitable bus 
connection links (which may comprise additional circuitry), and programming the 
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switches' internal control and forwarding circuitry (switch network management, bridge 
forwarding, etc. circuitry) so as to permit the switches to operate, in essence, from the 
viewpoint of network stations external to the switches, as a single virtual switch. One 
technology for implementing such cascaded switch networks is commercially available 
from the Assignee of the subject application under the name of Catalyst Matrix™. Such 
cascaded switch networks will hereinafter be referred to as "stacked switches" or 
"switches in a stacked configuration." 

It is also typical for a computer data network to include network management 
facilities. One well-known conventional protocol facilitating such management is pro- 
vided by the Simple Network Management Protocol (SNMP). According to the SNMP, 
network management is performed at network management station or stations which exe- 
cute management processes that communicate with SNMP agent processes executing on 
managed network nodes. Each agent process maintains a local database of variables that 
describe its state and history, and affect its operation. These variables are called 
"objects," and the collection of possible objects in a network station/node is comprised in 
a data structure called the Management Information Base (MSB). The management sta- 
tion or stations manage the network by using the SNMP to query the agents for the states 
of their respective local objects and/or to command the agents to change the states of their 
respective local objects. 

SNMP agents determine the states of a portion of their respective local objects to 
report to the management processes based upon data generated and/or received by the re- 
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spective nodes being monitored by those agents (hereinafter referred to as "raw data"). 
The amount of network system processing bandwidth consumed by SNMP agents in 
analyzing such raw data to determine the states of their respective local objects can be 
significant. Thus, in order to increase the amount of network system processing band- 
width that is devoted to processing of tasks that are of primary importance to the network 
(e.g., processing and forwarding of user data messages), it is desirable to reduce or elimi- 
nate the need for certain network components' (e.g., network switches') SNMP agents to 
gather and process such raw data. This can be accomplished by offloading the tasks re- 
quired to make such determinations to separate network entities (e.g., remote monitoring 
(RMON) probes) specially designed to carry out such tasks. These special RMON enti- 
ties monitor operation of network components and determine the states of their respective 
local objects for the components based upon raw data obtained by such monitoring, 
which local objects may be reported to management processes. Alternatively, the entities 
may gather the raw data from the network components being monitored, and may report 
the gathered raw data (and/or statistical information generated therefrom) to the manage- 
ment processes. The raw data, objects, and/or statistical information reported by such 
RMON entities to network management processes is hereinafter collectively and/or sepa- 
rately referred to as "network management-related information.'' 

Such specialized network entities may be used to gather and process raw data 
from stacked switches. For example, in one conventional monitoring arrangement, each 
switch in the stacked configuration may be coupled to a respective RMON probe. The 
probes may gather appropriate raw data (e.g., packets received and/or transmitted from 
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switch ports of the stacked switches), and provide to network management processes 
network management-related information from the raw data. 

Unfortunately, the RMON probes used in the aforedescribed conventional stacked 
switch monitoring arrangement typically are quite expensive. Thus, in order to reduce 
cost, it has been proposed to minimize the number of such probes used in the network. 
For example, in another conventional stacked switch monitoring arrangement, only a 
single RMON probe is employed, and the single probe is directly coupled to only one of 
the stacked switches. Raw data from switches in the stacked configuration that are not 
directly coupled to the probe is transmitted to the switch that is directly coupled to the 
probe via any intervening switches and bus link connections in the stack. Unfortunately, 
the transmission of raw data via intervening switches and bus link connections may con- 
sume a substantial amount of stacked switch communications bandwidth. Disadvanta- 
geously, this can degrade the performance of the stacked switches. 

Thus, it would be desirable to provide a stacked switch monitoring technique that 
permits efficient offloading of raw data processing from the stacked switches, requires 
only a minimal number of specialized network entities to gather and process such raw 
data, and does not result in substantial degradation of stacked switch performance. 

SUMMARY OF THE INVENTION 

Accordingly, the present invention provides a technique for remote monitoring of 
a switch network that overcomes the aforesaid and other disadvantages and drawbacks of 
the prior art. More specifically, in one aspect of the present invention, a technique is 

8 

H:\l 12\025\01 15\PR0SECUT\1 15PATAP.DOC 02/23/99 1 :07 PM 



PATENT 
874/112025-0115 

provided for gathering information that may be useful in network management (e.g., 
switch port activity-related information), from switches in the network that are in a 
stacked configuration. The information is gathered from the stacked switches by a single 
network entity (e.g., an SNMP remote monitoring probe) in such a way that it does not 
substantially degrade the performance of the switches. This is accomplished, in one em- 
bodiment of the technique of the present invention, by connecting the switches via re- 
spective connections to a multiplexer that selectively connects the switches, according to 
an arbitration scheme, to the single network entity. The entity gathers respective portions 
of the information from switches when it is connected to the switches by the multiplexer. 
The information gathered by the entity may be provided to another network entity (e.g., 
an SNMP management node) in order to permit the other entity to use that information in 
managing the network. 

In another embodiment of the technique of the present invention, only one of the 
switches is connected to the single information gathering entity. The switches that are 
not connected to the entity transmit, via respective dedicated ports and connections (i.e., 
ports and connections that are used solely for network information gathering activities), 
their respective portions of the information to the switch that is connected to the entity. 
The switch that is connected to the entity transmits, via a respective dedicated port and 
connection, the information received from the other switches, as well as, its own infor- 
mation to the entity. 
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These and other advantages of the present invention will become apparent as the 
following Detailed Description proceeds and upon reference to the Drawings, wherein 
like numerals depict like parts, and in which: 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a highly schematic block diagram of prior art communications archi- 
tecture protocol stacks used to transmit data between stations of a computer network. 

Figure 2 is a highly schematic, functional block diagram of a computer network 
comprising a stacked switch network, and wherein an embodiment of the present inven- 
tion is advantageously practiced. 

Figure 3 is a schematic, functional block diagram illustrating in greater detail the 
construction of the stacked switch network shown in Figure 2. 

Figure 4 is a highly schematic, functional block diagram illustrating construction 
of one of the switches in the stacked switch network shown in Figure 2. 

Figure 5 is schematic, functional block diagram illustrating construction of a 
stacked switch network configured to employ another embodiment of the present inven- 
tion. 

Although the following Detailed Description will proceed with reference being 
made to illustrative embodiments and methods of use, it should be understood that the 
present invention is not intended to be limited to these embodiments and methods of use. 
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Rather, the present invention should be viewed broadly as being of broad scope limited 
only as set forth in the hereinafter appended claims. 

DETAILED DESCRIPTION OF ILLUSTRATIVE EMBODIMENTS 

Figures 2-5 illustrate features of a computer network 200 wherein embodiments of 
the present invention may be advantageously practiced. Network 200 comprises a 
stacked switch network 300 which interconnects a plurality of network segments 228, 
232, 240, and 251. Each segment 228, 232, 240 comprises one or more local area net- 
works having computer endstations (not shown). Segment 251 is a network router seg- 
ment that comprises network router 250. Each segment 228, 232, 240 is coupled via a 
respective communications link 222, 224, 226 to a respective port 302 (i.e., port A), 304 
(i.e., port B), 312 (i.e., port C) of the switch network 300. Likewise, the router 250 of 
router segment 25 1 is coupled via a respective trunk line 230 to router port 306 (i.e., port 
R). 

Each of the router 250, switches 300A, 300B, 300C (whose function and opera- 
tion will be described more fully below), and endstations (not shown) of the segments 
228, 232, 240, 251 typically comprises a plurality of interconnected elements, such as one 
or more processors, memories (e.g., random and read only memories, and mass storage 
devices), and network adapters. The memory may comprise storage locations addressable 
by the processor and adapter for storing software programs and data structures. The 
processor may comprise processing elements or logic for executing the software pro- 
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grams and manipulating the data structures. An operating system, portions of which are 
typically resident in memory and executed by the processor, functionally organizes the 
stations by, inter alia, invoking network operations in support of software processes exe- 
cuting on the station. It will be apparent to those skilled in the art that other processor 
and memory means, including various computer readable media, may be used for storing 
and executing program instructions pertaining to the techniques described herein. Spe- 
cific features and components of the switch network 300 are described in greater detail 
below. 

Communications among the router 250, endstations (not shown), and network 300 
are typically effected by exchanging discrete data frames or packets between the com- 
municating nodes according to a conventional, predefined protocol. For example, in net- 
work 200, all message packets sent or received from the switch network 300 via ports 
302, 304, 306 may be Ethernet frames. Each Ethernet frame sent or received by the 
switch network 300 may include at least a MAC header, data field, and checksum field. 
The MAC header may include destination and source MAC address fields and a protocol 
type field that identifies the protocol (e.g., IP, IPX, AppleTalk, DECNet, etc.) of the data 
earned by the frame. The data field may contain IP header and message fields. The IP 
header field may contain, among other things, the IP source and destination addresses. 
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Stacked switch network 300 comprises a plurality of data network switches 300A, 
300B, 300C (e.g., Catalyst 3900™ series switches of the type commercially available 
from the Assignee of the subject application) coupled together via conventional stack link 

5 bus connection logic 600 A, 600B. More specifically, logic 600A couples a stack link bus 
port and associated logic 500 in switch 300A to a stack link bus link port and associated 
logic 502 in switch 300B. Similarly, logic 600B couples another stack link bus port and 
associated logic 501 in switch 300B to a stack link bus port and associated logic 504 in 
switch 300C. It should be understood that although, as is shown in Figure 3, switches 

10 300A and 300B, and switches 300B and 300C, may be coupled serially together by sepa- 
rate respective logic elements 600A, 600B, each of the switches 300A, 300B, 300C may 
be coupled together via a single respective stack link bus port in the switch to a single 
stack link bus connection logic block (not shown, e.g., of the type that is commercially 
available under the tradename Catalyst Matrix™ from the Assignee of the subject appli- 

is cation). Further alternatively, depending upon the particular design and functionality of 
the ports 500, 501, 502, and 504, and the control and forwarding logic (whose operation 
will be described more fully below) in the switches 300A, 300B, 300C, the circuitry in 
logic 600A, 600B may instead be comprised in the ports 500, 501, 502, and 504 and/or 
control and forwarding logic, and therefore, in this alternative configuration, the logic 

20 600A, 600B in the network 300 may be replaced by simple connection means (e.g., cable 
connectors). 
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Each switch 300A, 300B, 300C includes a respective internal bus (e.g., element 
800 in switch 300C) that is coupled via at least one stack link bus port and associated in- 
terface logic (e.g., 504 in switch 300C) to external stack link bus connection logic (e.g., 
element 600B in switch 300C). Each switch 300A, 300B, 300C also includes respective 
programmable control and forwarding logic (e.g., element 802 in switch 300C) compris- 
ing processing, memory, and other circuitry for storing and learning configuration infor- 
mation (e.g., source and destination MAC addresses of messages received by the switch, 
switch bridging table, switch segments' spanning tree and virtual local area network in- 
formation, etc.), and for providing appropriate commands to other elements (e.g., the 
switch ports) to cause data messages received by the switch to be forwarded to appropri- 
ate network segments coupled to the switch based upon this configuration information. 
In each switch, the switch's port logic circuitry (e.g., port A logic 302 and port P logic 
3 10C in switch 300C) and control and forwarding logic are coupled to each other via that 
switch's respective internal bus. The stack link bus port and associated logic in each 
switch 300A, 300B, 300C may comprise a Catalyst™ stack port line interface card 
(commercially available from the Assignee of the subject application) inserted into a bus 
expansion slot (not shown) in the switch. Although not shown in the Figures for pur- 
poses of clarity of illustration, each switch 300A, 300B, 300C in network 300 typically 
will include tens or hundreds of ports coupled to network segments. 

The control and forwarding logic and stack link bus port and associated logic in 
each switch, and the logic 600A, 600B, are configured to together implement conven- 
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tional techniques for permitting the switches 300A, 300B, 300C to function together as a 
single logical/virtual switch. More specifically, when configured in the stacked arrange- 
ment 300, after the switches 300A, 300B, 300C and logic 600A, 600B are initially acti- 
vated, they execute initial power-on self-diagnostics, and thereafter, enter a "stack dis- 
covery" mode of operation. 

In the stack discovery mode of operation, the control and forwarding logic in each 
switch 300A, 300B, 300C first "senses" that its switch is coupled to logic 600A and/or 
600B, and then determines the particular configuration of the stacked switch network 
300, using suitable conventional autosensing/autoconfiguration techniques. The control 
and fowarding logic in the switches 300A, 300B, 300C then assigns to the switches re- 
spective unique identification numbers (e.g., based upon unique identification numbers of 
respective ports of the logic 600 A, 600B to which the switches are coupled). 

In order for the switch network 300 to operate as a single logical switch, the indi- 
vidual switches 300A, 300B, 300C in the network 300 must share and coordinate their 
respective configuration information so as to permit the switches to coordinate their re- 
spective message forwarding and filtering decisions, "learning" of addresses of stations in 
segments coupled to network 200 and of the switches coupled to such segments, etc. 
This may be accomplished either by preconfiguring the control and forwarding logic in 
the switches to predesignate one of the switches as a "repository" for the switches' con- 
figuration information, either automatically after the stack discovery mode is completed, 
or by manually preprogramming such predesignation into the switches' control and for- 
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warding logic. For example, the switches' control and forwarding logic may be config- 
ured to designate the switch with the lowest assigned unique identification number (e.g., 
switch 300A) to be the repository for the switches' configuration information. 

The respective control and forwarding logic of the switches (e.g., switches 300B, 
300C) other than the designated repository switch (e.g., switch 300A) may forward their 
respective configuration information to the control and forwarding logic of the repository 
switch, which may combine and store it with the repository switch's own configuration 
information. That is, the control and fowarding logic of switch 300C may forward its 
configuration information via its own internal bus to port 504, and thence via logic 600B 
to port 501 of switch 300B. The control and forwarding logic of switch 300B may re- 
ceive this configuration via its own switch's internal bus, and forward its own configura- 
tion information and the configuration information received from switch 300C to port 
502 via its own internal bus. The configuration information received by port 502 may 
then be forwarded to port 500 via logic 600A, and thence may be provided via the inter- 
nal bus of switch 300A to the control and forwarding logic of switch 300A for storage. 
Alternatively, the switches' respective configuration information may be preconfigured 
into the control and forwarding logic of switch 300A. 

The logic 600A, 600B may likewise be used to permit the respective control and 
forwarding logic of switches 300B, 300C to receive the combined configuration informa- 
tion from the control and forwarding logic of switch 300A. Thus, the switches 300A, 
300B, 300C may utilize the identical configuration information when making their for- 
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warding decisions; additionally, the switches 300A, 300B, 300C may coordinate transfer 
and forwarding of data messages among themselves via bus link connection logic 600A, 
600B. These features permit the switches to coordinate their forwarding operations in 
such a way as to function together, from the vantage point of stations (e.g., router 250 and 
stations in segments 228, 232) outside of network 300, as a single logical switch. 

For example, when a data message is received by a given switch (e.g., switch 
300C) from a network segment (e.g., segment 228) in the network 300, the control and 
fowarding logic of that switch 300C may utilize the combined configuration information 
(along with the destination address and other information in the message) to determine 
that the message should be forwarded to another switch (e.g., switch 300B) that is cou- 
pled to a network segment (e.g., 232) in which the message's destination is located. The 
control and forwarding logic of switch 300C may then cause that message to be for- 
warded (together with appropriate forwarding control signals) via port 504 and logic 
600B to port 501. Based upon these control signals, the control and forwarding logic in 
switch 300B may then cause the data message to be forwarded via port 304 to segment 
232 wherein the intended destination station exists. 

In network 200, switch network management system 401 is also provided, 
which system 401 includes a switch-controlled multiplexer 400, which is coupled to the 
switch network 300 via dedicated probe ports (collectively referred to in Figure 2 by nu- 
merical 310) of the switches. Each switch 300A, 300B, 300C indues a respective, dedi- 
cated probe port and associated logic 3 1 OA, 3 1 0B, 3 1 0C that couples, via a respective 
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connection 700, 702, 704, that switch to multiplexer 400. Multiplexer 400 may comprise 
a conventional l-of-3 token ring network media access unit connection system that is 
configured to connect, at any given time, only one of the ports 31 OA, 31 0B, 3 10C to con- 
nection line 706, based upon control voltages supplied to the system 400 by the ports 
310A, 310B, 31 0C. That is, each of the ports 3 1 OA, 3 1 0B, 3 1 0C is configured to be able 
to controllably supply to the system 400 (i.e., via its respective connection 700, 702, or 
704) voltage signals that cause the system 400 to connect the probe port supplying the 
voltage signals to a single conventional RMON probe 402 via connection 706; however, 
no more than one of the probe ports 3 10A, 3 1 0B, 3 1 0C may be connected by multiplexer 
400 to the probe 402 at any given time. When a probe port is in this way connected to the 
probe 402, that port may supply raw data signals (e.g., related to operation of the switch 
network 300) to the probe 402. Using conventional techniques, the probe 402 may gen- 
erate appropriate network management-related information based upon the raw data sig- 
nals, and may make the network management-related information available to a conven- 
tional network management process 408. Although not shown in the Figures, it should be 
understood that communications links exist between the process 408 and managed net- 
work components that permit the process 408 to provide control messages to the managed 
network components. 

In accordance with this embodiment of the present invention, the control and for- 
warding logic in the switches 300A, 300B, 300C together control supply by the ports 
31 OA, 31 0B, 3 10C of connection control voltages to the multiplexer 400 so as to cause 
the ports 3 1 OA, 3 1 0B, 3 1 0C to be connected by the multiplexer 400 to the probe 402 in 
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accordance with a round robin arbitration scheme. This arbitration scheme is imple- 
mented via a process that will be described below. 

In the first step of the arbitration process used in this embodiment of the present 
invention, the probe port 3 1 OA of the switch 300A that is designated as the repository for 
the switches 5 combined configuration information is connected by the multiplexer 400 to 
the probe 402. Although not shown in the Figures, the control and forwarding logic in 
each switch in network 300 maintains a respective user-modifiable selection table that 
indicates which ports of the switch are to be monitored by the probe 402. The control and 
forwarding logic in switch 300A determines from its selection table which ports (if any) 
of the switch 300A (e.g., port 312) are to be monitored by the probe 402, and if there is 
more than one such port to be monitored, the control and forwarding logic also deter- 
mines the sequence in which such ports are to be monitored (e.g., based upon the numeri- 
cal order of identification numbers/addresses assigned to the switch's ports). 

The control and forwarding logic in switch 3 00 A then causes activity-related data 
of the first port to be monitored (e.g., data messages received and/or transmitted by the 
port during a predetermined time period) to be copied and supplied via the switch's inter- 
nal bus to the probe port 3 1 OA. Thence, the activity-related data is transmitted to the 
probe 402 via connection 702, multiplexer 400, and connection 706. After this activity- 
related data has been transferred to the probe 402, the control and forwarding logic in 
switch 3 00 A causes activity-related data of the next port (if any) to be monitored in 
switch 300A to be copied and supplied via the switch's internal bus to the probe port 
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31 OA, and thence, to the probe 402 via connection 702, multiplexer 400, and connection 
706. This process continues for each of the other ports in switch 300A to be monitored 
(if any), until activity-related data from all such ports has been supplied to the probe 402. 

When activity-related data has been supplied to the probe 402 from all of the ports 
to be monitored in switch 300A, the control and forwarding logic in switch 300A com- 
mands the port 3 1 OA to cause the multiplexer 400 to disconnect the port 3 1 OA from the 
probe 402. The control and forwarding logic in switch 300A then transmits signals (via 
the internal bus of switch 300A, port 500, logic 600A, port 502, and the internal bus of 
switch 300B) to the control and forwarding logic in the next switch 300B to be monitored 
by the probe 402 (e.g., the switch having an assigned identification number that is the 
next lowest compared to that of the switch 300A). These signals inform the control and 
forwarding logic in switch 300B that switch 300B is to begin providing activity-related 
data to the probe 402. 

In response to these signals, the control and forwarding logic in switch 300B 
commands its probe port 3 1 0B to cause the multiplexer 400 to connect port 3 1 0B to the 
probe 402. The control and forwarding logic in the switch 300B determines from its re- 
spective selection table which ports (if any) of the switch 300B are to be monitored, and 
if more than one of the switch's ports are to be monitored, the control and forwarding 
logic also determines the sequence in which such ports are to be monitored (e.g., based 
upon the numerical order of identification numbers/addresses assigned to the switch's 
ports). After multiplexer 400 connects the port 3 1 0B to probe 402, the control and for- 
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warding logic in switch 300B causes activity-related data of the first port (if any) to be 
monitored to be copied and supplied via the switch's internal bus to probe port 31 OB. 
This activity-related data is then supplied from port 3 1 OB to the probe 402 via connection 
702, multiplexer 400, and connection 706. Thereafter, if there remain any additional 
ports in the switch 300B to be monitored, the control and forwarding logic in switch 
300B copies and transmits the respective activity-related data from each such additional 
port to the probe 402, in succession, in the port monitoring sequence order determined by 
the switch's control and forwarding logic. 

When activity-related data has been supplied to the probe 402 from all of the ports 
to be monitored in switch 300B, the control and forwarding logic in switch 300B com- 
mands the port 3 1 0B to cause the multiplexer 400 to disconnect the port 3 10B from the 
probe 402. The control and forwarding logic in switch 300B then transmits signals (via 
the internal bus of switch 300B, port 501, logic 600B, port 504, and the internal bus of 
switch 300C) to the control and forwarding logic in switch 300C (e.g., the switch having 
the highest assigned identification number) indicating that switch 300C is to begin 
transmitting port activity-related data to the probe 402. 

In response to these signals, the control and forwarding logic of switch 300C commands 
its probe port 3 10C to cause the multiplexer 400 to connect port 3 10C to the probe 402. 
The control and forwarding logic in the switch 300C determines from its respective se- 
lection table which ports (if any) of the switch 300C are to be monitored, if there are 
more than one such port to be monitored, the control and forwarding logic also deter- 
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mines the sequence order in which monitoring of such ports is to occur (e.g., based upon 
the numerical order of identification numbers/addresses assigned to the switch's ports). 
After multiplexer 400 connects port 3 10C to probe 402, the control and forwarding logic 
in switch 300C causes activity-related data of the first port (if any) to be monitored to be 
copied and supplied via the internal bus of switch 300C to probe port 3 10C. Port 3 10C 
then transmits this activity-related data to the probe 402 via connection 704, multiplexer 
400, and connection 706. Thereafter, if there remain any additional ports in the switch 
300C to be monitored, the control and forwarding logic in switch 300C similarly copies 
and transmits respective activity-related data from any such additional ports, in the se- 
quence order for monitoring of such ports determined by the control and forwarding 
logic, to the probe 402. 

When activity-related data has been supplied to the probe 402 from all of the ports 
to be monitored in switch 300C, the control and forwarding logic in switch 300C com- 
mands the port 3 10C to cause the multiplexer 400 to disconnect the port 3 10C from the 
probe 402. The control and forwarding logic in switch 300C then transmits signals (via 
the same connection path used to transmit the configuration information of switch 300C 
to the control and forwarding logic of switch 300A) to the control and forwarding logic in 
the switch 300A. In response to such signals, the control and forwarding logic in switch 
3 00 A recommences the arbitration process, beginning with the first step in such process 
as set forth above. The above-described round robin arbitration process may loop 
through these process steps indefinitely. 
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Using conventional techniques, the probe 402 uses the activity-related informa- 
tion received from the switch network 300 to generate network management-related in- 
formation, which probe 402 makes available to network management process 408. Proc- 
ess 408 uses the network management-related information to appropriately manage com- 
5 ponents in network 200. 

Thus, in the above-described round robin arbitration process, each switch in the 
switch network 300, in succession, provides respective activity-related data to the probe 
402. The control and forwarding logic in each of the switches 300A, 300B, 300C exe- 
cutes program processes (not shown) for carrying out steps necessary to implement the 
10 arbitration process. 

Figure 5 is schematic, functional block diagram illustrating construction of a 
stacked switch network 300' configured to employ another embodiment of the present 
invention. It should be understood that unless specifically stated to the contrary, the 
structure and operation of the network 300' are substantially the same as the structure and 
15 operation of network 300. In network 300', each of the dedicated ports 3 1 OA, 3 1 0B, 
3 10C comprises a respective transmit portion and receive portion, referenced in Figure 5 
as RX and TX, respectively. 

In this alternative embodiment, the need to use and control a multiplexer 400 is 
eliminated, and only a single dedicated probe port 31 OA is directly coupled to the probe 
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402, via a single connection 900. More specifically, the transmit portion TX of probe 
3 1 OA is coupled via connection 900 to probe 402. The receive portion RX of port 3 10A 
is coupled to the transmit portion TX of port 3 10B. The transmit portion TX of port 
3 1 0C is coupled to the receive portion RX of port 3 1 0B. The respective TX and RX 
ports in each of the ports 3 1 OA, 3 1 0B ? 3 1 0C are also coupled together. 

In network 300', when activity-related data of a port (e.g., port 306 or 3 12) in 
switch 300A is to be transmitted to the probe 402, it is first copied and transmitted to the 
switch's transmit port TX. Thereafter, the activity-related data is transmitted directly 
from the transmit port TX to the probe 402 via connection 900. 

Conversely, if the activity-related data is of a port (e.g., port 304) in switch 300B, 
the data is first copied and transmitted via the internal bus of switch 300B to the transmit 
portion TX of port 3 10B, and thereafter, is transmitted by the transmit portion TX of port 
3 1 0B to the receive portion RX of port 3 1 OA. The receive portion RX of port 3 1 OA then 
transmits the data to the transmit portion TX of port 31 OA, and thence, is transmitted via 
connection 900 to the probe 402. 

Also conversely, if the activity-related data is of a port (e.g., port 302) in the 
switch 300C, the data is first copied and transmitted via the internal bus of switch 300C 
to the transmit portion TX of port 3 1 0C, which transmit portion TX then transmits the 
data to the receive portion of the port 3 1 0B. Thence, the data is transmitted to the 
transmit portion TX of port 31 0B, and thereafter, is transmitted by the transmit portion 
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TX of port 3 1 OB to the receive portion RX of port 3 1 OA. The receive portion RX of port 
3 1 OA then transmits the data to the transmit portion TX of port 3 1 OA, and thence, is 
transmitted via connection 900 to the probe 402. 

Thus, in this latter network 300\ the ports 310A, 310B, 310C, and the connec- 
5 tions between them, are used solely for transmission of switch activity-related informa- 
tion to the probe 402. 

The foregoing description has been directed to specific embodiments of this in- 
vention. It will be apparent, however, that other variations and modifications may be 
, 3S% made to the described embodiments, with the attainment of some or all of their advan- 

py io tages. Therefore, it is the object of the appended claims to cover all such variations and 
Ly modifications as come within the true spirit and scope of the invention. 

TO What is claimed is: 

UJ 
Q 
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CLAIMS 

1 . A system for use in gathering information for use in managing a network, said 
network including a plurality of network switches configured in a stack configuration, 
said system comprising: 

a multiplexer for selectively connecting, according to an arbitration scheme, said 
switches to a single entity for gathering said information from said switches, each of said 
switches being connected to said multiplexer by a respective connection. 

2. A system according to claim 1 , wherein said entity comprises a remote monitoring 
probe. 

3. A system according to claim 1 , wherein said multiplexer comprises a network 
hub. 4 ^ 

4. A system according to claim 1 , wherein said multiplexer comprises a network 
media access unit. 

5. A system according to claim 1, wherein said switches are configured to generate 
control signals for implementing"§md^bitration scheme. 

6. A system according to claim 5, wherein said multiplexer is configured to be con- 
trolled by said control signals. 
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7. A system according to claim 1, wherein said information comprises switch port 
activity information, and said switches^ configured to permit user selection of particu- 
lar switch port activity information to be supplied to the entity via the multiplexer. 

8. A system according to claim 1, further comprising program processes executed by 
said switches for carrying out saidnrbitration scheme. 

9. A system for use in gathering information that may be useful to network man- 
agement, said system comprising: 

a plurality of network switches configured in a stacked configuration, each re-^ ^ 
spective switch including a respective port for receiving switch activity-related informa- 
tion from other ports of the respective switch, the switches providing respective switch 
activity-related information to a single remote monitoring probe, one respective port of 
one of said switches being connected to another respective port of another of said 
switches, and said another respective port being connected to said single remote monitor- 
ing probe, the respective activity-related information of said one switch being provided to 
said single remote monitoring probe via a connection dedicated solely to transmission of 
said respective activity-related information. 
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10. A system according to claim 9, wherein said switches are configured to imple- 
ment an arbitration scheme for determining order in which the respective activity-related 
information of respective switches is provided to said probe. 

11. A system according to claim 9, wherein a third respective port of a third switch is 
connected to said one respective portvTa another connection, said another connection 
being solely for transmission of respective activity-related information of said third 
switch to said one switch. 
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ABSTRACT OF THE DISCLOSURE 

A technique for use in gathering network activity-related information from cas- 
caded network switches is provided. Using this technique, the information can be gath- 
ered without substantially reducing performance of the cascaded switches. In one em- 
bodiment, a single remote monitoring probe is connected via respective connections to 
each of the switches so as to receive the information from the switches. In another em- 
bodiment, only one of the switches is connected to the probe, and the other switches 
transmit their respective portions of the information to the switch connected to probe. 
The switch connected to the probe provides these portions of the information, as well as, 
any of its respective activity-related information to the probe. In this latter embodiment, 
the switches may be connected by dedicated connections and switch ports that are used 
solely for communicating the activity-related information. 
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